cloud-trail-log-file-validation-enabled
Checks if AWS CloudTrail creates a signed digest file with logs. AWS recommends that the file validation must be enabled on all trails. The rule is NON_COMPLIANT if the validation is not enabled.
Identifier: CLOUD_TRAIL_LOG_FILE_VALIDATION_ENABLED
Resource Types: AWS::CloudTrail::Trail
Trigger type: Periodic
AWS Region: All supported AWS regions
Parameters:
- None
AWS CloudFormation template
To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.
